Information Security Analyst

Tenable • Columbia, MD

15d • Hybrid

About The Position

Tenable is hiring a hands-on Mid Risk and Compliance Analyst for its InfoSec team. The analyst will drive compliance and assurance efforts for Tenable products and cloud services and support external risk assessments, security assessments, and audits. The role represents the company to prospects, customers, and partners on security questionnaires, assessments, and audits; coordinates with internal teams to communicate compliance obligations; and completes third-party risk assessments for new and potential vendors. The position is US-based and requires working hybrid/onsite at Tenable’s headquarters in Columbia, Maryland.

Requirements

• At least 4 years of experience performing information security and vendor risk assessments based on industry-accepted standards.
• At least 4 years of experience responding to security assessments, SAQs, and compliance requirements.
• At least 4 years of experience implementing, monitoring, and reporting on control processes, documentation, and remediation items.
• Experience working with the Federal Risk and Authorization Management Program (FedRAMP).
• Ability to work hybrid/onsite at the headquarters in Columbia, Maryland; the position is US-based only.
• Self-driven, able to work independently, and able to comprehend requirements.
• Strong communication skills and ability to collaborate effectively with all levels.
• Analytical mindset with a rational, pragmatic, and realistic approach to security, risk, and compliance.
• Ability to adopt and use technology, with advanced proficiency in Excel, PowerPoint, and Vizio.

Nice To Haves

• Knowledge of governance, risk, and compliance (GRC) frameworks.
• Experience performing or undergoing internal and external audits.
• Relevant security certifications such as SSCP, Sec+, or CISA.
• Experience in a Big 4 or similar security consulting or risk assurance role.
• Experience conducting audits and managing privacy, business continuity, and disaster recovery programs.
• BS or BA in Information Technology, Computer Science, Information Security, or another related field.

Responsibilities

• Represent the company to prospects, customers, and partners for security questionnaires, assessments, and audits.
• Collaborate with Sales, Engineering, Information Security, IT, and Product Development teams to communicate compliance obligations and requirements.
• Complete third-party risk assessments for new and potential vendors.
• Educate stakeholders on their responsibilities.
• Coordinate and participate in internal and external audit walkthroughs.
• Help guide and perform remediation of issues identified during third-party assurance or internal reviews.
• Assist with the development and execution of the internal compliance program, including preparation for audits, certifications, and risk assessments.
• Assist with the development, administration, and continuous monitoring of internal security controls.
• Support special projects as needed.

Benefits

• Medical insurance
• Dental insurance
• Vision insurance
• Disability insurance
• Life insurance
• 401(k) retirement savings with company match
• Employee stock purchase plan
• Employee referral program
• Flexible spending accounts
• Employee Assistance Program (EAP)
• Education assistance
• Parental leave
• Paid time off (PTO)
• Company-paid holidays
• Health and wellness events
• Community programs
• Variable compensation, including bonuses for non-sales roles, depending on company and individual performance

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed